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Abstract. We consider two styles of proof calculi for a family of tense logics, presented in 
a formalism based on nested sequents. A nested sequent can be seen as a tree of traditional 
single-sided sequents. Our first style of calculi is what we call "shallow calculi", where 
inference rules are only applied at the root node in a nested sequent. Our shallow calculi 
are extensions of Kashima's calculus for tense logic and share an essential characteristic 
with display calculi, namely, the presence of structural rules called "display postulates". 
Shallow calculi enjoy a simple cut elimination procedure, but are unsuitable for proof 
search due to the presence of display postulates and other structural rules. The second 
style of calculi uses deep-inference, whereby inference rules can be applied at any node in 
a nested sequent. We show that, for a range of extensions of tense logic, the two styles 
of calculi are equivalent, and there is a natural proof theoretic correspondence between 
display postulates and deep inference. The deep inference calculi enjoy the subformula 
property and have no display postulates or other structural rules, making them a better 
framework for proof search. 



1. Introduction 

A nested sequent is essentially a tree whose nodes are traditional sequents. It has been used 
as the syntactic judgment for proof calculi for several tense and modal logics [T71 [H [5]. 
perhaps due to the fact that the tree structure embodies, to some extent, the underlying 
Kripke frames in those logics. In our setting, the nodes in a nested sequent are traditional 
single-sided sequents (i.e., multisets of formulae), and the edges connecting the nodes are 
labelled either with o or • (these labels correspond to the modal operator □ and the tense 
operator ■). For example, the trees shown in Figure [T] are a tree representation of nested 
sequents, where each Fj is a multiset of formulae. 

There are two natural styles of formalising inference rules on nested sequents. The 
first is one that conforms with the tradition of sequent calculi, namely, to allow inference 
rules to act only on formulae or structures that appear at the root sequent. We shall 
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Figure 1: Inference rules seen as operations on trees 

refer to this style of inference as shallow inference. The second style is to allow inference 
rules to act on formulae or structures in an arbitrary node in the tree; we call this deep 
inference. Kashima's work [T7] includes inference systems of both kinds. More specifically, 
Kashima presents two proof systems for tense logic, a shallow proof system SKt and a 
deep-inference system S2Kt, and proves, via semantical methods, that they are equivalent. 
In this paper, we investigate, via proof theoretic methods, the connection between shallow 
and deep inference systems for a wide range of tense logics extending Kashima's SKt and 
S2Kt. 

The primary motivation of our work actually stems from the problem of structuring 
proof search for display calculi [3]; more specifically Kracht's formulation of display calculi 
for extensions of tense logics |18) . We have yet to tackle the proof search problem for 
Kracht's display calculi in their full generality. What we show here is that in a more 
restricted setting of nested sequent calculi, which can be seen as a restricted form of display 
calculi, one main impediment to proof search, i.e., unrestricted use of structural rules, can be 
eliminated. In particular, we aim for a uniform design methodology for deep inference calculi 
without structural rules. This design choice sets us apart from similar work by Briinnler and 
StraBburger [7J, where structural rules in the deep inference systems are actually desirable, 
out of the consideration for modularity (see also the discussion in Section [8]) . 

Display postulates and other structural rules. Kashima's shallow calculus SKt shares an 
essential feature with Kracht's display calculi, namely, the presence of the so-called display 
postulates (called the turn rules in [17]). Seen as an operation on trees, the display postulates 
are a rotation operation on trees, allowing one to bring an arbitrary node in a tree to the 
root, e.g., the transformation shown in Figure [1]^ a) "displays" the sequent T^. 

An interesting result in Kracht's work [iH] is that one can construct display calculi 
for extensions of tense logic modularly. That is, for every axiom in a certain form called 
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primitive form, one can construct a structural rule that captures exactly that axiom. Due 
to the similarity between display calculi and our shallow calculi, Kracht's approach can 
be adapted to our setting as well to design modular shallow calculi. Seen as operations 
on trees, structural rules induced by axioms may involve addition or removal of nodes in 
the trees, e.g., the transitivity axiom, IDA — > DDA, translates to the operation shown in 
Figure [T]^b). In addition to these structural rules, our shallow calculi (and Kracht's display 
calculi) also contain contraction and weakening rules, which allow duplication and removal 
of arbitrary subtrees. A combination of all these structural rules presents a complication 
in using display calculi or shallow nested-sequent calculi as a framework to structure proof 
search. 

Deep inference and propagation rules. The role of display postulates is really to move a 
sequent to the root of a nested sequent so that an inference rule may be applied to it. 
Therefore a natural way to eliminate display postulates is to just allow inference rules 
to be applied deeply, as already shown by Kashima in his proof of the correspondence 
between SKt and S2Kt |17] . However, for extensions of tense logics, deep inference alone 
is not enough. For example, in the extension with the transitivity axiom, the problem is 
not so much that one cannot apply rules deeply. Rather, it is more to do with the fact 
that we extend the tree of sequents with extra nodes. To eliminate the structural rules 
for transitivity, we need to somehow build in transitivity into logical rules. We do this 
systematically via the so-called propagation rules. More specifically, the introduction rules 
for <0-formulae (and its tense counterparts), reading the rules bottom up, allow propagations 
of the formulae along certain paths in the nested sequent. As an illustration, consider the 
instance of a propagation rule needed to absorb the transitivity axiom given in Figure [l]^c) , 
where a formula A in one node (where r4 resides) is propagated to another node (where 
resides). We defer the justification for this rule to Section [Gj for now, we just note that one 
can introduce a O-prefixed formula across different nodes at arbitrary depth in the tree, not 
just the top node. 

Summary of results. Our main contributions are the following: 

• We give a uniform syntactic cut elimination procedure for extensions of SKt with what we 
call linear structural rules (Section [3|). Our procedure is very similar to Belnap's general 
cut elimination for display logics, as it relies on the existence of the "display property" 
for our shallow calculi. It can be seen as an adaptation of Kracht's cut elimination for 
display calculi for tense logics [18] to the setting of nested sequent calculi. Existing works 
on syntactic cut elimination for nested sequent calculi address only the modal fragment 
(in the deep inference setting) and for a limited number of extensions, e.g., [H 13 d [23] . 
or only for some extensions of tense logic without negation or implication [25]. 

• We show that for two classes of axioms, the Scott-Lemmon axioms [20j and path axioms 
(Section [6]), the axioms can be modularly turned into linear structural rules, and hence 
cut admissibility for the shallow systems for these extensions follows from our uniform cut 
elimination. These two classes of axioms cover most of standard normal modal axioms in 
the literature, e.g., reflexivity, transitivity, euclideanness, convergence, seriality, etc. 

• We give a syntactic proof of the equivalence of SKt and S2Kt (which we call DKt 
here). Kashima gave a proof of this correspondence via a semantic argument jl7j . We 
further show that, for some extensions of SKt with Scott-Lemmon axioms, one can get 
the corresponding deep inference systems extending DKt, without structural rules, but 
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Figure 2: Relationships between proof systems 



with local propagation rules (Section [5]). For the extensions with path axioms, we show 
how one can derive systematically the corresponding deep inference calculi, also without 
structural rules, but with global propagation rules. By local propagation rules, we mean 
propagation rules in which formulae may be propagated only along a path of bounded 
length, whereas global propagation rules do not restrict the length of the path. 
• We show that all our deep inference calculi for tense logics enjoy the separation property: 
if one restricts the calculi to their modal fragments, i.e., by omitting rules that mention 
tense operators, then one gets complete calculi for the modal parts of the tense logics. 
The relationships between various proof systems in this paper are summarised in Figure [2j 
The direction of an arrow denotes inclusion, e.g., Kashima's S2Kt is equivalent to DKt. 
The dashed arrow in the lowest row denotes the fact that the equivalence is only established 
for some, but not all, Scott-Lemmon axioms. We have not yet explored the connections 
between path axioms and Scott-Lemmon axioms. 

Outline of the paper. Section [2] gives an overview of the syntax and the semantics of tense 
logic. Section [3] presents the shallow calculus SKt and a uniform syntactic cut elimination 
proof for any extension of SKt with linear structural rules. Section S] presents a deep 
inference calculus DKt, which is similar to Kashima's S2Kt, but without structural rules. 
We prove that SKt and DKt are cut-free equivalent, i.e., any cut-free proof in SKt can 
be transformed into a cut-free proof in DKt and vice versa. Section [5] presents extensions 
of SKt with Scott-Lemmon axioms. We show that for some extensions, one can design 
deep inference calculi based on DKt extended with some local propagation rules. Section [6] 
considers extensions of SKt with path axioms. We show how these axioms can be captured 
using global propagation rules in deep inference. We show further that applicability of 
propagation rules is decidable, by mapping the decision problem into the problem of non- 
emptiness checking of the intersection of a context-free language and a regular language. 
Section [7] gives some preliminary results in proof search for DKt. Section [8] concludes the 
paper and discusses related and future work. 

This paper is a revised and extended version of an extended abstract presented at the 
TABLEAUX 2009 conference |13] . We have added the following new material: a uniform 
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(1) A^D^A AVD^A 

(2) A-^moA AvmoA 

(3) a{A B) {OA OB) 0{A AB) V O'AV OB 

(4) uIa ^ B) ^ {UA ^ UB) i{AAB)V^AvmB. 



Figure 3: Axioms of minimal tense logic. Their nnf are shown on the right hand side. 



wl^^A iff w\}^A 

AV B iff Aor B 

w Ih UA iff Mu. if wRu then uh A 

w Ih MA iff Vii. if uRw then A 



w\\- AAB iff 
w Ih 0^ iff 
w Ih ♦A iff 



w \\- A and if Ih i? 
3u.wRu and n Ih A 
3u.uRw and n Ih A 



Figure 4: Forcing of formulae 



cut elimination proof for extensions of SKt with linear structural rules, extensions of SKt 
with Scott-Lemmon axioms, a new extension of DKt, and a new section (Section [6]) on path 
axioms. However, we have removed the material on proof search for KtSA in the conference 
version, as we have recently discovered that the proof search algorithm outlined in that 
paper is unsound, although the calculi themselves are sound and complete. We defer the 
complete treatment of proof search for extensions of DKt to future work. 



2. Tense Logic 

To simplify presentation, we shall consider formulae of tense logic Kt which are in negation 
normal form (nnf), given by the following grammar: 

A:=a\^a\AyA\AAA\UA\mA\()A\^A 

where a ranges over atomic formulae and -la is the negation of a. We shall denote with A the 
nnf of the negation of A. Implication can then be defined via negation: A ^ B = Ay B. 
The axioms of minimal tense logic Kt are all the axioms of propositional logic, plus the 
axioms in Figure [3l 

The theorems of Kt are those that are generated from the above axioms and their 
substitution instances using the following rules: 

^ MP ^ NecU ^ NecM 

A Kt- frame is a pair {W,R)^ with W a non-empty set (of worlds) and R x W. 

A Kt-v[iode\ is a triple (W^i?, F), with (W^ii) a Kt frame and V : Atm — )• 2^ a valuation 
mapping each atom to the set of worlds where it is true. 

For a world w (zW and an atom a € Atm, li w € V{a) then we write w Ih a and say a 
is forced at w; otherwise we write w Ij/- a and say a is rejected at w. Forcing and rejection 
of compound formulae is defined by mutual recursion in Figure |H A ifi-formula A is valid 
iff it is forced by all worlds in all models, i.e. iff w Ih A for all {W, R, V) and for all w G W. 
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3. System SKt: A "shallow" calculus 

We consider a right-sided proof system for tense logic where the syntactic judgment is a tree 
of multisets of formulae, called a nested sequent. Nested sequents have been used previously 
in proof systems for modal and tense logics [17^ [U [23] . 

Definition 3.1. A nested sequent is a multiset 

{Ai,..., Ak, o{Ti}, o{r„}, .{Ai}, •{A„}} 

where k,m,n > 0, and each Fj and each are themselves nested sequents. 

We shall use the following notational conventions when writing nested sequents. We 
shall remove outermost braces, e.g., we write A,B,C instead of {A,B,C}. Braces for se- 
quents nested inside o{} or •{} are also removed, e.g., instead of writing o{{A, B,C}}, we 
write o{A, B,C}. The empty (nested) sequent is denoted by 0. When we juxtapose two 
sequents as in F, A we mean a sequent resulting from the multiset-union of T and A. When 
A is a singleton multiset, e.g., {A} or {o{A'}}, we simply write: T, A or T, o{A'}. Since we 
shall only be concerned with nested sequents, we shall refer to nested sequents simply as 
sequents in the rest of the paper. 

The above definition of sequents can also be seen as a special case of structures in 
display calculi, e.g., with ',' (comma), • and o as structural connectives jl2j . 

A context is a sequent with holes in place of formulae. A context with a single hole is 
written as S [] . Multiple- hole contexts are written as S []•••[] , or abbreviated as T,^ [] where 
k is the number of holes. We write S'^[A] to denote the sequent that results from filling the 
holes in uniformly with A. 

Given a proof system S, a derivation in S is defined as usual, i.e., as a tree whose 
nodes are nested sequents such that every node is the conclusion of an inference rule in S, 
and all its child nodes are exactly the premises of the same rule. An open derivation in 
S may additionally contain one or more leaf nodes, called open leaf nodes, which are not 
conclusions of any rules in S. We say that a sequent T is derivable from A m S if there is 
an open derivation of T whose open leaf nodes are A. 

The shallow proof system for Kt, called SKt, is given in Figure El Note that the id- 
rule is restricted to the atomic form, but it is easy to show that the general id rule on 
arbitrary formulae is admissible. SKt is basically Kashima's system for tense logic (also 
called SKt) [17j, but with a more general contraction rule (ctr), which allows contraction 
of arbitrary sequents. The general contraction rule is used to simplify our cut elimination 
proof, and as we shall see in Section [U it can be replaced by formula contraction. System 
SKt can also be seen as a single-sided version of a display calculus. The rules rp and rf are 
called the residuation rules [12]. They are an example of display postulates commonly found 
in display calculi, and are used to bring a node in a nested sequent to the top level. The 
following is an analog of the display property of display calculus. Its proof is straightforward 
by induction on the size of contexts. 

Proposition 3.2. Let S[A] be a sequent. Then there exists a sequent F such that S[A] is 
derivable from A,F and vice versa, using only the rules rp and rf . 

3.1. Soundness and completeness. To prove soundness, we first show that each sequent 
has a corresponding ifi-formula, and then show that the rules of SKt, reading them top 
down, preserve validity of the formula corresponding to the premise sequent. Completeness 
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r,A A,A T,A T,B T,A,B 

cut ' , . ' A ^ \ , V 



r,a,a r,A r,AAB r,AyB 

r,A,A r r,o{A} r,.{A} 

— ■ — rfr — — mh — - rf — - rp 

r,A r,A ^'^ •{r},A ■' o{t},a 

r,»{A} r,o{A} r,.{A,A} t,o{a,a} 

T,mA ■ r,n^ ^ r,.{A},i^ ^ r,o{A},OA 

Figure 5: System SKt 

is shown by simulating the Hilbert system for tense logic in SKt. The translation from 
sequents to formulae are given below. In the translation, we assume two logical constants 
_L ('false') and T ('true'). This is just a notational convenience, as the constants can be 
defined in a standard way, e.g., as a A a and a V a for some fixed atomic proposition a. As 
usual, the empty disjunction denotes ± and the empty conjunction denotes T. 

Definition 3.3. The function r translates an SKt-sequent 

{^1, . . . , Ak, o{ri}, . . . , o{r,„}, .{Ai}, •{A„}} 

into the iTt-formula (modulo associativity and commutativity of V and A): 

V • • • V Afc V □r(ri) V • • • V □r(rm) V ■r(Ai) V • • • V ■r(A„). 
Lemma 3.4 (Soundness). Every SK.t-derivable Kt formula is valid. 
Proof. We show that for every rule p of SKt 

••• 

r ^ 

the following holds: if for every i £ {1, . . . ,n}, the formula T(Ti) is valid then the formula 
r(r) is vahd. 

Since the formula-translation r(r) V a V a of the id rule is obviously valid, it then 
follows that every formula derivable in SKt is also valid. We show the soundness of rf 
here; the others are similar or easier: We want to show that if t{T) V □(r(A)) is valid then 
■ (T(r)) V t(A) is valid. We prove this by contradiction. Suppose t{T) V □(r(A)) is valid 
but ■(r(r)) V t(A) is not, so there is a model {W,R,V) and a world w £ W such that 
w ^ ■(r(r)) V t(A), which means 

w ^ ■(r(r)) and w ^ r(A). (3.1) 

Since w ^ ■(r(r)), there must be a world v £ W such that vRw and v ^ t{T). Now since 
r(r) vn(r(A)) is valid, we have v \= t{T) or v \= □(r(A)). But because v ^ ''"(F), it follows 
that V \= □(r(A)). Since vRw, by definition, we have w \= t(A), which contradicts our 
assumption above in (|3.ip . □ 
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o{r'},Ai o{r'},A2 Ai,A2,»{A'} 



Hi n2 o{T'},A,AA, ^i_V A,^.{A'} 

T,.{A} o{A},A _ r', .{Ai A A2} o{A,\/A2},A' 
rt = " 

o{T},A ■' A, •{A} : : 

o{r},.{A} r, .{Ai A A2} o{Ai V A2}, A 

(1) (2) (3) 



V 



{T'},A2 A,,A2,»{A'} 

- cut 



o{o{r^}},A o{T'},A, A,,o{r'},.{A'} 

o{r},.{A} ^; on, on, .{A-} 

r',.{.{A}} o{r'},.{A'} 



r,«WA}} 



o{o{r'}},A' 

{r},.{A} o{o{r'}},A 

(4) (5) 
Figure 6: Some derivations in SKt illustrating the basic idea of cut elimination 



A 



Lemma 3.5 (Completeness). Every Kt-theorem is SJit- derivable. 

Proof. The proof follows a standard translation from Hilbert systems to Gentzen's systems 
(see, e.g., p6l). We show here only derivations of Axioms (1) and (3) in Figure[3l the other 
axioms and rules are not difficult to handle. Double lines abbreviate derivations: 

o{ },A,A A,A,B,.{^'^ B,A,B,.{} 

.{A, A] AAB,A,B_,.{} 

•{A],^A ^ o{AAB,A,B} 

A,o{^A] ''^ (){AAB),(:}A,o{B} ^ 

A.U^A ° <){AAB),OA,UB 

=r^ V _ _ V 

Ayu^A (){AAB)y OAyUB 

□ 

The following theorem is then a simple corollary of the Lemma 13.41 and Lemma [ 
Theorem 3.6. A Kt-formula A is valid iff A is SJit- derivable. 



3.2. Cut elimination. The main difficulty in proving cut elimination for SKt is in finding 
the right cut reduction for some cases involving the rules rp and rf . For instance, consider 
the derivation (1) in Figure [6l It is not obvious that there is a cut reduction strategy 
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that works locally without generalizing the cut rule to, e.g., one which allows cut on any 
sub-sequent in a sequent. Instead, we shall follow a global cut reduction strategy similar to 
that used in cut elimination for display logics [3j. The idea is that, instead of permuting 
the cut rule locally, we trace the cut formula A (in Hi) and A (in 112), until they both 
become principal in their respective proofs, and then apply the cut rule(s) at that point on 
smaller formulae. Schematically, our simple strategy can be illustrated as follows: Suppose 
that Hi and 112 are, respectively, derivation (2) and (3) in Figure [H that A = Ai A A2 and 
there is a single instance in each proof where the cut formula is used. To reduce the cut on 
A, we first transform Hi by uniformly substituting '{A} for A in Hi (see derivation (4) in 
Figured]). We then prove the open leaf o{o{r'}}, A by uniformly substituting o{r'} for A 
in II2 (see derivation (5) in Figured]). Notice that the cuts on Ai and A2 introduced in the 
proof above are on smaller formulae than A. 

The above simplified explanation implicitly assumes that a uniform substitution of a 
formula (or formulae) in a derivation results in a well-formed derivation, and that the cut 
formulae are not contracted. The precise statement of the proof substitution idea becomes 
more involved once these aspects are taken into account. This will be made precise in the 
main lemmas in the cut elimination proof. 

Note that the proof substitution technique outlined above can actually be applied to 
proof systems that are more general than SKt; what is essentially needed is that the infer- 
ence rules of the proof systems obey a certain closure property under arbitrary substitutions 
of structures for formulae. In the following, in anticipation of extensions of SKt to be pre- 
sented in Section [5l we shall prove a more general cut elimination statement, which applies 
to any extensions of SKt with a certain class of structural rules. 

Definition 3.7. Let F be a nested sequent. We denote with J-(T) the multiset of all formula 
occurrences in F. A structural rule p is said to be linear if for every instance of the rule 




we have that -F(F) = J- (A). That is, a linear structural rule does not allow weakening 
or contraction of formulae occurrences in the premise or conclusion of the rule. We shall 
assume that each linear rule induces, for each of its instance, a bijection between formula 
occurrences in the premise and formula occurrences in the conclusion, so that in every 
instance of the rule, a formula occurrence in the premise can be related to a unique formula 
occurrence in the conclusion, and vice versaQ A linear structural rule p is said to be 
substitution-closed if for any instance of the rule as given below left, where ^ is a formula 
occurrence shared between the premise and the conclusion, one can obtain another instance 
of p as given below right, for any structure A: 

S'Ul S'[A1 
— — p — - — - p 
E[A] S[A] 

The substitution-closure property mentioned above is similar to Belnap's condition (C6) 
for cut elimination for display logics [3] . Note that this requirement for substitution closure 
rules out context-sensitive linear rules such as the rule shown in the leftmost figure below. 
To see why, consider the instance of p shown in the middle figure below. If one substitutes 

"'^To guarantee that such a bijection does exist for each instance, we shaU restrict to only inference rules 
which can be represented as finite schemata with no side conditions, as are commonly found in most proof 
systems. 
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o{a} for one of the occurrences of b, say, the first one from the left, then the resulting 
instance, as shown in the rightmost derivation below, would not be a valid instance of p. 

r,*{A},A ^ a,»{b,c},b,c ^ a,»{o{a},c},b,c 

r, o{A},A a,o{b,c},b,c a,o{o{a},c},b,c 

We use the notation F to denote that the sequent T is derivable in the proof system 
S. We write I-5 11 : F when we want to be explicit about the particular derivation 11 of F. 
The cut rank of an instance of cut is defined as usual as the size of the cut formula. The 
cut rank of a derivation H, denoted with cr(n), is the largest cut rank of the cut instances 
in n (or zero, if there are no cuts in Ft). Given a formula A, we denote with \A\ its size. 
Given a derivation H, we denote with |n| its height, i.e., the length of a longest branch in 
the derivation tree of U. 

We shall now give a general cut elimination proof for any extension of SKt with 
substitution-closed linear structural rules. So in the following lemmas and theorem, we 
shall assume a (possibly empty) set S of substitution-closed linear structural rules. We 
denote with SKt + S the proof system obtained by adding the rules in S to SKt. 

Lemma 3.8. //l-sKt+5 Hi : F, a and l-sKt+5 : 5]'^[a], where k > 1 and both Hi and II2 
are cut free, then there exists a cut free H such that l-sKt+5 n : S*^[F]. 

Proof. By induction on |n2|. For the base cases, the non-trivial case is when 112 ends with 
id and a is active in the rule, i.e., E'=[a] = E^-^[a],a,a and Ho is as shown below left. Then 
we construct H as shown below right. 

Hi 

F,a 

id — ,. -I , , wk 



Most of the inductive cases follow straightforwardly from the induction hypothesis. We 
show here two non-trivial cases involving contraction and a rule in S: 

• Suppose T,^[a] = T,\[a],T,2[a] and 112 ends with a contraction on E2[o], as shown below 
left. Then FI is constructed as shown below right, where is obtained from the induction 
hypothesis: 

n'2 n^' 

j:\[a],^[a],Ei[a] E^ [F] , E^^ F] , ^^2 F] ^ 

CZT CtV 

Ei[a],E^2[«] Si[F],E^2[r] 

• Suppose II2 is as shown below left, where p e S. Then FI is constructed as shown below 
right, where is obtained from the induction hypothesis: 

n'2 n'2' 

E"^[al E"^[F] 
— p — p. 

The substitution closure property of p guarantees that the instance of p on the right is 
valid. 

□ 
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Note that for the substitution of proofs in Lemma 13.81 (and other substitution lemmas 
to follow) to succeed, one needs to allow contraction on arbitrary structures. Note also 
that as the rules from S are closed under substitution of structures for formulae, they do 
not require any special treatment in the following proofs of substitution lemmas, i.e., in 
inductive cases involving these rules, the properties being proved can be established by 
straightforward applications of the inductive hypotheses, so we shall not detail the cases 
involving these rules. 

Lemma 3.9. Suppose hsKt+s Hi : A,^ and l-sKt+5 112 : A, md l-sKt+5 H : T,''[A\/ B], 
for some k >1, where the cut ranks of Hi, II2 and H are smaller than \ AaB\. Then there 
exists a proof W such that l-sKt+5 H' : S^[A] and cr(n) < \A A B\. 

Proof. By induction on [n|. Most cases are straightforward. The only non-trivial case is 
when A\/ B is principal in the last rule of 11, i.e., 11 is of the form shown below left. The 
proof n' is constructed as shown below right, where ^' is a cut-free derivation obtained via 
the induction hypothesis. 

U2 ^' 

A,B S^i[A],Ai? 

1 r~i = cut 

A, A S^~^[A],yl,A 





V5],A,B Sf-^[A],A,A 

ctr 



cut 



^'I'^AV B],AV B Sj-^[A],A 

□ 

Lemma 3.10. Suppose hsKt+s Hi : A,A,B and l-sKt+5 : T.'^IA A B], for some k > I, 
and the cut ranks of Hi and II2 are smaller than \ Ay B\. Then there exists a proof U such 
that hsKt+5 n : T.'^IA] and cr{U) <\AV B\. 

Proof. This is proved analogously to Lemma |3.9[ □ 

To prove the next two lemmas, we use two derived rules, i.e., dl and d2 given below. 
These two rules are derivable using rp, rf, ctr and wk. They are similar to the so-called 
"medial rules" used to prove admissibility of structure contraction in [7J. The rule dl is 
derived as shown in the rightmost derivation below {d2 is derived analogously). 

r,o{Ai},o{A2} 
A2,*{r,o{Ai}} ""^ 

Ai,A2,.{r,o{Ai}} 
r,o{Ai,A2},o{Ai} 
.{r,o{Ai,A2}},Ai ''^ 
.{r,o{Ai,A2}},Ai,A2 

r,o{Ai},o{A2} r,.{Ai},*{A2} r,o{Ai,A2},o{Ai,A2} 

r,o{Ai,A2} r,.{Ai,A2} r,o{Ai,A2} ' 

Lemma 3.11. Suppose hsKt+s Hi : A, o{yl} and l-sKt+<s n2 : S'^[0^], for some k > I, 
and the cut ranks of Hi and II2 are smaller than \OA\. Then there exists a proof H such 
that hsKt+5 n : S'=[A] and cr{U) < \DA\. 
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Proof. By induction on |n2|. The non-trivial case is when 112 ends with on as shown 
below left. The derivation 11 in this case is constructed as shown below right. There, the 
derivation H' is obtained by applying the induction hypothesis to Ilg. Note that by the 
induction hypothesis, cr(n') < \OA\. 

Et'[^],o{r,A} A,o{A} 
.{E^i[A]},r,:4 .{A},^ 



»{srMA]},*{A},r 

^ (12 

s^i[OA],o{r,A} ^ .{s^i[A],A},r 



cut 



s^i[OA],o{r},OA st-i[A],o{r},A 



□ 



Lemma 3.12. Suppose hsKt+s Hi : A,o{A',A} and l-sKt+<s : S'^pA], for some 
k > 1, and the cut ranks of Hi and II2 are smaller than \()A\. Then there exists H such that 
KsKt+5 n : ^''[A,o{A'}] and cr{U) < \0A\. 

Proof By induction on |n2|. The non-trivial case 112 is when 112 is as given below left. The 
derivation 11 is constructed as shown below right, where H' is obtained from the induction 
hypothesis and which satisfies cr(n') < lO^I- 

St-^[A,o{A^}],o{A} A,o{A^A} 
.{St-i[A,o{A'}]},A •{A}, A', A 



n'2 .{S^i[A,o{A'}]},.{A},A' 



cut 



Jl\-\UAlo{A} ^ «{S^^[A,o{A-}],A},A- _ 

T.'l-\UA],UA S^-^A, o{A'}], A, o{A'} 



d2 



□ 



Lemma 3.13. Suppose l-sKt+5 Hi : A,«{^} and hsKt+s ^2 '■ ^^^[4^]; for some k > \, 
and the cut ranks of lii and 112 CLfe smaller than Then there exists a proof H such 

that hsKt+5 n : S'=[A] and cr(n) <\MA\. 

Proof. This is proved analogously to Lemma |3. Ill □ 

Lemma 3.14. Suppose hsKt+s Hi : A, •{A', A} and l-sKt+5 112 : S'^P^]; for some 
k>\, and the cut ranks o/IIi and II2 o,re smaller than \^A\. Then there exists 11 such that 
hsKt+5 n : S'=[A,.{A'}] and cr{Ii) < 

Proof. This is proved analogously to Lemma |3.12[ □ 

Lemma 3.15. Let C be a non-atomic formula. Suppose l~sKt+5 ^1 : r,C and l-sKt+5 
^'2 : ri"[C], for some n > 1, and the cut ranks of and ^2 o,re smaller than \C\. Then 
there exists a proof ^' such that l-sKt+5 ^ : r2"[r] and cr(^) < |C|. 

Proof. By induction on the height of ^'2 and case analysis on C. The non-trivial cases are 
when ^'2 ends with an introduction rule on C. That is, we have J]"[C] = J]""^[C],(7 for 
some context r2"~^[]. We show the cases where C is either OB, OB or Bi A B2; the other 
cases can be treated similarly. 
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• Suppose C = Di? and ^2 is the following derivation: 

% 

By induction hypothesis, we have l~sKt+5 ^' : ""^[r], °{B} and cr{^') < \C\. Applying 
Lemma [3TT] to ^' and ^1 (that is, by instantiating ^ to i?, A to ri"~^[r], and to 
the context T, [ ]), we obtain hsKt+5 * : r,0^-^[r] = J]"[r] such that cr(^') < \OB\. 

• Suppose C = OB and is the following derivation: 

nr'[OB],o{T',B} 

n^-\OB],o{r'},OB ^ 

By induction hypothesis, we have 

^':f^rnr],o{r',i?}. 

Applying Lemma [3?T2] to ^' and (i.e., instantiating A to -B, A to il"'"^[r]. A' to 
r', and to the context T, []), we obtain hsKt+5 * : r,J7"~^[r] = il"[r] such that 
cr{^) < \0B\. 

• Suppose C = Bi A B2 and ^'2 is the following derivation: 

ei 62 

O^-^^i A B2] , Bi OrM-gj A B2] , B2 
ni-\BiAB2],BiAB2 

By induction hypothesis, we have l-sKt+5 ©'i : f^i ""^[r], Bi and l-sKt+5 ©2 • -62- 
Applying Lemma [33] to e'l, e'2 and ^-i, we obtain hsKt+5 * : r,Jli"^[r] = ^r\r] such 
that cr(^) < |Bi A ^21- 

□ 

Theorem 3.16. Cut elimination holds for SKt + S. 

Proof. Given a derivation with cuts, we remove topmost cuts in succession, using LemmaElSl 
and Lemma [3.151 □ 

Corollary 3.17. Cut elimination holds for SKt. 



4. System DKt: A contraction-free deep-sequent calculus 

We now consider another sequent system which uses deep inference, where rules can be 
applied directly to any node within a nested sequent. We call this system DKt, and give 
its inference rules in Figure [71 Note that there are no structural rules in DKt, and the 
contraction rule is absorbed into the logical rules. Notice that, reading the logical rules 
bottom up, we keep the principal formulae in the premise. This is actually not neccessary 
for some rules (e.g., ■, A, etc.), but this form of rule allows for a better accounting of 
formulae in our saturation-based proof search procedure (see Section [7|) . We also do not 
include the cut rule in DKt as it is admissible in DKt, the translations from SKt to DKt 
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id ^ ■ -m A . , ^1 V 



S[a,a] T.[A^B] T.[Ay B] 

n^A,.{A}] S[.{A,A},»A] S[o{A,»^},A] 

S[M ■ S[.{A},f^] S[o{A,f^}] 



♦ 



2 



n^A,o{A}] S[o{A,A},OA] S[.{A,0^},A] 

Sp^] ^ S[o{A},OA] S[.{A,OA}] 

Figure 7: The contraction-free deep-inference system DKt 

and back, to be shown below, do not use the cut rule. A side note on the cut rule: one 
could introduce a "deep" version of cut: 

just as is done in nested sequent calculi for modal logics in [H [7]. This form of cut rule 
can be easily derived from its shallow counterpart (see Figure [5]) using the display property 
(Proposition I3.2( ). So when we speak of cut admissibility in DKt, it applies equally to both 
the shallow cut and the deep cut above. 

The following intuitive observation about DKt rules will be useful later: Rules in DKt 
are characterized by propagations of formulae across different nodes in a nested sequent 
tree. The shape of the tree is not affected by these propagations, and the only change that 
can occur to the tree is the creation of new nodes (via the introduction rules ■ and □). 

System DKt corresponds to Kashima's S2Kt [T7j, but with the contraction rule ab- 
sorbed into the logical rules. The modal fragment of DKt was also developed independently 
by Briinnler [H [7j and Poggiolesi [23] . Kashima shows that DKt proofs can be encoded 
into SKt, essentially due to the display property of SKt (Proposition 13. 2p which allows 
displaying and undisplaying of any node within a nested sequent. Kashima also shows that 
DKt is complete for tense logic, via semantic arguments. We prove a stronger result: every 
cut-free SKt-proof can be transformed into a DKt-proof, hence DKt is complete and cut 
is admissible in DKt. 

To translate cut-free SKt-proofs into DKt-proofs, we show that all structural rules of 
SKt are height-preserving admissible in DKt. 

Definition 4.1. Given a proof system S and a rule p with premises Fi, . . . ,r„, and con- 
clusion F, p is said to be admissible in S if the following holds: whenever hs Hi : Fi, 
. . . , hg n„ : F„, then there exists FT such that hs FT : F. In the case where n = 1, we say 
that p is height-preserving admissible in S if |n| = |ni|. 

In the following lemmas, we show a stronger admissibility result for weakening and 
contraction, i.e., we shall show that the following deep versions of weakening and contraction 
are in fact admissible. 

m , s[A,A] 

Obviously, the rules wk and ctr are just instances of the above rules. As we shall see, 
admissibility of dgc follows from admissibility of formula contraction (the rule dfc below) 
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and two distribution rules shown below. 

nA,A\ S[o{Ai},o{A2}] £KAi},.{A2}] 

T.[A] S[o{Ai,A2}] S[.{Ai,A2}] 

The distribution rules mf and mp are usually called the medial rules in the deep inference 
literature (see, e.g., [SI [HI [7]), and, in their various forms, they have been used to reduce 
general contraction to formulae or atomic contraction in different proof systems for classical, 
intuitionistic, linear, modal and tense logics. The modal medial rule mf has been used in 
[7] to show admissibility of contraction for several nested sequent calculi for modal logics. 
Our proof of admissibility of contraction here is an extension of Briinnler and StraBburger's 
proof [7] to tense logics. 

Lemma 4.2 (Admissibility of weakening). The rule dw is height-preserving admissible in 
DKt. 

Proof. By simple induction on |n|. □ 

The proofs for the following lemmas that concern structural rules that change the shape 
of the tree of a nested sequent share similarities. That is, the only interesting cases in the 
proofs are those that concern propagation of formulae across different nodes in a nested 
sequent. We show here an interesting case in the proof for the admissibility of display 
postulates. 

Lemma 4.3 (Admissibility of display postulates). The rules rp and rf are both height- 
preserving admissible in DKt. 

Proof. We show here admissibility of rp, the other rule can be dealt with similarly. Consider 
the rp rule in Figure [5) Suppose that hDKt n : F, "{A}. We shall construct a derivation H' 
for the nested sequent o{F}, A by induction on |nj. The non-trivial cases are when there is 
an exchange of formulae between F and A. We show one case below; the others can be done 
analogously. Suppose 11 is as shown below left, where F = F', ^A. Then 11' is as shown 
below right where H'l is obtained from the induction hypothesis: 

ni n'l 

T',^A,.{A,A} o{T',fA},A,A 
F',fA-{A} o{F',i^},A 

By the induction hypothesis |ni| = hence we also have |n| = |n'|. □ 

To show admissibility of general contraction, we first show that formula contraction, 
mp and mf are all heigh-preserving admissible in DKt. 

Lemma 4.4. The rules dfc, mf and mp are height-preserving admissible in DKt. 

Proof. Height-preserving admissibility of dfc can be proved by simple induction on the 
height of the derivation of its premise. We show here height-preserving admissibility of mf; 
height-preserving admissibility of mp can be proved analogously. 

So suppose we have hoKt FT : i;[o{Ai}, o{A2}]. We show by induction on |n| that there 
exists n' such that hDKt n' : S[o{Ai,A2}] and |n| = |n'|. We show here two non-trivial 
cases: 

• Suppose n ends with Oi that moves a formula into o{Ai} when read upwards. That is, 

I][o{Ai},o{A2}] = S'[0Ao{Ai},o{A2}] 
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and n is as shown below left. Then 11' is constructed as shown below right, where ^' is 
obtained by applying the induction hypothesis to 

s'[0AoRAi},o{A2}] sqoA°RAi,A2}] 

S'[0A,o{Ai},o{A2}] S'[0A°{Ai,A2}] 

Since |^''| = |^'|, it follows that |n'| = |n|. 
• Suppose n ends with ^2 that moves a formula out from o{Ai}. That is, Ai = ^A,A[ 
and n is as shown below left. Then 11' is constructed as shown below right, where ^' is 
obtained from the induction hypothesis. It is easy to see that |n'| = |n|. 

S[A°{»^,A'J,o{A2}] S[Ao{fI,Ai,A2}] 
S[o{i^,A'i},o{A2}] S[o{f^,A'i,A2}] 

□ 

Lemma 4.5 (Admissibility of contraction). The rule dgc is height-preserving admissible in 
DKt. 

Proof. Suppose hDKt H : S[A,A]. We need to show that there exists 11' such that hDKt 
n' : S[A] and |n| = |n'|. We do this by induction on the size of A. If A is the empty set 
then it is straightforward. If A is a formula, then it is an instance of dfc which is height- 
preserving admissible by Lemma l4.4[ The other cases follow from the induction hypothesis 
and Lemma |4.4[ Consider, for instance, the case where A = o{A'}. Then by Lemma 14.41 
we have a proof ^, with \^\ = \U\, such that hoKt * : 5][o{A', A'}]. Note that since A' 
is of a smaller size than o{A'}, we can apply the induction hypothesis to ^ and obtain a 
proof n', with |n'| < |n|, such that hoKt n' : S[o{A'}]. □ 

Theorem 4.6. For every sequent T, hgKt T if and only if hoKt T- 

Proof. The forward direction, that is, showing that \~s'Kt T implies l~DKt follows from 
admissibility of the structural rules of SKt in DKt (Lemma 14.21 - Lemma l4.5p . 

For the converse, we use the display property of SKt (Proposition 13. 2p to simulate the 
deep-inference rules of DKt. We show here the derivations for the rules Oi and ^2 (the 
other cases are similar): 

S[o{A,4^},^] 

S[o{A,A},OA] A',A,o{A,^A} 

: .{A',A},A,fA ''^ 

A',o{A,A},OA ^ .{A'},iA,A,^A^ 

V FTT. — 2 — r~A — ctr 



A',o{A},OA,OA " .{A'},A,iA 
A',o{A},OA A',o{A,f^} 



S[o{A},0^] S[o{A,fA}] 
where the dotted part of the derivation is obtained from applying Proposition 13.21 □ 
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A consequence of Theorem 14.61 is that the general contraction rule in SKt can be 
replaced by formula contraction. This can be proved as follows: take a cut-free proof in 
SKt, translate it to DKt and then translate it back to SKt. Since general contraction 
is admissible in DKt, and since the translation from DKt to SKt does not use general 
contraction (only formula contraction), we can effectively replace the general contraction in 
SKt with formula contraction. 

An interesting feature of DKt is that in a proof of a sequent, the 'colour' of a (formula 
or structural) connective does not change when moving from premise to conclusion or vice 
versa. Let us call a formula (a sequent, a rule) purely modal if it contains no black connec- 
tives. It is easy to see that if a purely modal formula (sequent) is provable in DKt, then 
it is provable using only purely modal rules. Let DK = {zd. A, V, □, Oi}, i-e., it is the set 
of purely modal rules of DKt. The above observation leads to the following "separation" 
result: 

Theorem 4.7. For every modal formula A, Hdk A iff A is a theorem of K. 

Proof. (=>) Suppose Kdk A. Since DK is a subsystem of DKt, we must have hDKt A, 
and then hsKt A. By the soundness of SKt, A is Kt- valid. But all purely modal i^t-valid 
formulae are also i^T-valid. Thus purely modal A is also a theorem of K. 

("4=) Suppose A is a theorem of K. But the theorems of K are also theorems of Kt, hence 
A is derivable in SKt. This derivation may contain cuts, but by cut elimination we know 
that A is also cut-free derivable in SKt. The cut-free SKt-derivation of a purely modal 
formula cannot contain any instances of the rules ■ or ♦ since these introduce non-modal 
connectives into their conclusion. Thus, the only way to create an occurrence of • on our 
way up from the end-sequent is to use rp. By Theorem l4.61 the cut-free SKt-derivation of A 
can be transformed into a (cut-free) derivation of A in DKt. Moreover, the transformation 
given in the proof removes all applications of rp without creating black structural or logical 
connectives. For example, an SKt derivation of a, a, '{A} is converted to a DKt derivation 
of (o{a,a}, A) = S[a,a]. Hence the transformed derivation is actually a derivation in DK. 

□ 

This completeness result for DK is known from [4J; what we show here is how it can 
be derived as a consequence of completeness of DKt. 

5. Proof systems for some extensions of tense logic 

We now consider extensions of tense logic with a class of axioms that subsumes a range 
of standard normal modal axioms, e.g., reflexivity, transitivity, euclideanness, etc. These 
axioms, called Scott-Lemmon axioms [20], are formulae of the form: 

G{h,i,j,k): O^a'A^O^O'^A 

where h,i,j,k > and O*^^ (likewise, □"A) denotes the formula A prefixed with n- 
occurrences of (resp. □). For example, the axiom for transitivity, IDA — )• DD^, is 
an instance of Scott-Lemmon axiom scheme with h = 0, i = l, j = 2 and A; = 0. 

In the following subsection, we show that, for each set SL of Scott-Lemmon axioms, 
there is a shallow system that modularly extends SKt with SL for which cut elimination 
holds. By modular extension we mean that the rules of the extended systems are the 
rules of SKt plus a set of structural rules that are derived directly from the modal axioms 
(in fact, they are in one-to-one correspondence). However, there does not appear to be 
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a systematic way to derive the corresponding deep- inference systems for these extensions. 
In subsequent subsections, we give deep- inference systems for two well-known extensions 
of Kt, i.e., Kt extended with axioms for SA and 5*5, and an extension of Kt with the 
axiom of uniqueness CD : 0^ — > OA. Again, as with DKt, the rules for the deep-inference 
systems are characterized by propagations of formulae across different nodes in the nested 
sequents. However, the design of the rules for the deep system is not as modular as its 
shallow counterpart, since it needs to take into account the closure of the axioms. 

A nice feature of the deep inference systems shown below is that they satisfy the same 
separation property as with DKt: the purely modal subset of each deep-inference system 
is sound and complete with respect to its modal fragment. That is, we obtain the deep- 
inference systems for S4, S5 and K + CD "for free" simply by dropping all the tense rules. 

5.1. Extending SKt with Scott-Lemmon axioms. One way to extend SKt with Scott- 
Lemmon axioms is to simply add those axiom schemes as inference rules without premise. 
However, the resulting system would not satisfy cut elimination. Instead, we shall follow an 
approach that absorbs those axioms into structural rules without breaking cut elimination. 
In the display calculus setting, Kracht [H] has shown that a class of axioms, called primitive 
axioms, can be turned into structural rules in a systematic way and the display calculus for 
tense logic extended with those structural rules also satisfies cut elimination. A primitive 
axiom is an axiom of the form A B where both A and B are built using propositional 
variables. A, V, 0, and We shall follow Kracht's approach in absorbing Scott-Lemmon's 
axioms into structural rules. However, the main problem is that Scott-Lemmon axioms, in 
the form shown earlier, are not strictly speaking primitive axioms. But as we shall see later, 
they have equivalent representations in primitive form. A primitive Scott-Lemmon axiom 
is a formula of the form 

P{h,i,j,k): ^''O^A^O'^'^A. 

Definition 5.1. Let S be a set of axiom schemes whose members are formulae of the form 
F —?■ G. An axiomatic extension of SKt with S is the proof system obtained by adding to 
SKt the inference rule 

F,G 

for each F ^ G ^ S. We denote with SKtAxS the axiomatic extension of SKt with axioms 
S. 

In the following, we shall use the notation o"{A} to denote the sequent 

o{_^A}...}. 

n 

The notation •"{A} is defined similarly. 

Lemma 5.2. For any h,i,j,k > 0, the axiomatic extension o/ SKt with G{h,i,j,k) is 
equivalent to the axiomatic extension o/ SKt with P{h,i, j,k). 

Proof. We give a syntactic proof of this lemma, i.e., we show that the axiom G{h,i,j,k) 
is derivable in SKt extended with axiom P{h,i,j,k), and vice versa. The axiom rules 
corresponding to G{h,i, j, k) and P{h,i,j,k) are, respectively, 

gj^ PSL 

n''<}'A,a^O''A and m^a^A,o'^^A 
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In the following derivation, we make use of the fact that deep inference rules of DKt 
are derivable in SKt, so we shall freely mix deep and shallow inference rules (including 
residuation rules). Wc shall also make use of derived rules that allow one to go from a 
formula to its sequent counterpart, e.g., replacing DA with o{^}, etc., which could easily 
be done using appropriate cuts. So we shall also assume the following deep inference rules: 

The primitive form of Scott-Lemmon axiom can then be derived as follows: 

if] 

o^{A,o^{i''A}} ^ 
i:=SL ===== rTr=Oi 



□h^j^fe^^ □j^fe^fe^ oi{A},0^n''4''A 
o^{A},Df'0'^''A 



cut 



uf^n^A, O'i'^A 

Note that in the derivation above, to simplify presentation, we do not keep the principal 
formula of a rule in the premise as we would normally do in DKt. 

It is not difficult to see that the converse also holds, i.e., assuming P(h,i,j,k) (i.e., 
the rule PSL), one can derive the axiom G{h, k), using cuts, rp and other modal/tense 
introduction rules. We leave this as an exercise to the reader. □ 

Having shown the equivalence of the axioms G{h,i,j,k) and P{h,i,j,k), we shall use 
the latter to design a cut-free extension of SKt with Scott-Lemmon axioms. For each 
P{h,i,j,k), we define a corresponding structural rule as follows: 

r,o'K{A}} 



r,.Ho-'{A}} 



sl{h,i,j, k) 



Definition 5.3. Let S be a set of axioms and let p(S) be the corresponding structural rules 
for axioms in S. The structural extension of SKt with S is the proof system obtained by 
adding the structural rules p{S) to SKt. We denote with SKtS the structural extension of 
SKt with S. 

Proposition 5.4. For any set of Scott-Lemmon axioms SL, the proof systems SKtAxSL 
and SKtSL are equivalent. 

Proof. The following two derivations show how one can derive an axiom P{h,i,j,k) using 
its structural rule counterpart, and vice versa. 

,d r,oU.nA}} 



i r_fc 

Oi;^l — ; : : — , axiom 



o'{*''{A,A}} 



o 



{.HA}},0-»M . ■^□^r(A),0'»V(A) r,CTBV(A) 



^^UiA,()^^^A ' r,»'*{oJ{A}} 



20 



R. GORE, L. POSTNIECE, AND A. TIU 



mA,A] S[»A'{»AA}] S[OA°{OAA}] 

" ^[♦A,.{A}] " S[0^,o{A}] " 

nOA,A] no{A,iA},iA] n.{A,OA},OA] 

nOA] ' S[o{A,f^}] ' S[.{A,0^}] ' 

Figure 8: Additional propagation rules for DS4 



Note that in presenting the derivations, we adopt the same simplication steps as we did in 
Lemma 15.21 □ 

As noted earlier, SKtAxSL does not have cut elimination, as typical for axiomatic 
extensions of sequent calculi, although one could perhaps show that applications of the 
cut rule can be limited to those that cut directly with the axioms. But we shall show 
that the "pure" sequent calculus SKtSL does enjoy true cut elimination. This is a simple 
consequence of Theorem 13.161 as the rules in p(SL) are substitution-closed linear rules. 

Theorem 5.5. For any set of Scott-Lemmon axioms SL, cut elimination holds for SKtSL. 

In the following subsections, we consider three instances of SKtSL, i.e., extensions 
of SKt with axioms for S4, S5, and the axiom of uniqueness. We give deep inference 
systems for these logics that are equivalent to their shallow counterparts. These are by no 
means an exhaustive list of logics for which the correspondence between deep and shallow 
systems holds; they are meant as an illustration of the kind of methods used to eliminate 
structural rules via propagation rules. For the extensions with S4 and 5*5, the proofs of 
the correspondence are not very different from the proof of the correspondence between 
SKt and DKt, so we shall only state the correspondence results and omit the proofs. The 
interested reader can consult the doctoral thesis of the second author [21] for details. We 
shall present a more general framework in Section [6l in which this correspondence can be 
proved uniformly for a class of axiomatic extensions of SKt. 



5.2. A deep-inference system for modal tense logic KtS4. Consider an extension of 
SKt with the axioms for reflexivity and transitivity (given in primitive form): T : A ()A 
and 4 : 00 A — > OA. Their corresponding structural rules are: 

r,o{A} r,o{A} ^ 

r,A f r,o{o{A}} 

Using residuation, we can also derived the tense counterparts of the rule Tj and 4j, with 
the structural connective o replaced by •: 

r,»{A} 

°{r},A \ 
r,»{A} o{o{r}},A 
°{r},A "I o{r},.{A} 
r,A ^ r,.{.{A}} 

As with the design of DKt, in designing a deep inference system for KtS4, we aim to get 
rid of all structural rules. This is achieved via propagation rules for 0-formulae, and by 
residuation, also for ♦-formulae. The propagation rules needed are given in Figure [3 
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S[M,o{»AA}] £[o{A,OA},OA] S[OA'{OAA}] S[.{A,»A},»^] 
^[♦Ao{A}] " S[o{A,0^}] ' S[0^,.{A}] ^ S[.{A,i^}] 

Figure 9: Additional propagation rules for DS5 

Definition 5.6. We denote with SS4 the proof system obtained by adding to SKt the 
structural rules Tf and 4j. System DS4 denotes DKt plus the propagation rules given in 
Figure [H 

The purely modal rules of DS4, i.e.,T{i and 4c, coincide with Briinnler's rules for T and 
4 in [3]. The rules of DS4 can be shown to be derivable in SS4. 

Theorem 5.7. For every T, we have l-ss4 F if and only if I-ds4 F. 

As with DKt, if we restrict DS4 to its purely modal fragment, we obtain a sound and 
complete proof system for modal logic S4. Let DKS4 be DK extended with Tb and 4c. 
The proof of the following theorem is similar to the proof of Theorem 14.71 

Theorem 5.8 (Separation). For every modal formula A, I-dks4 A iff A is a theorem of 
SI 

5.3. A deep-inference system for modal tense logic S5. We can obtain KtS5 from 
SS4 by adding the symmetry axiom B : A ^ \I\(}A. The corresponding primitive form of 
B is 0^ — >■ ^A, and its corresponding structural rule is 

rWA} 

F,o{A} 

The additional propagation rules, on top of those for DS4, needed to absorb this structural 
rule and those of SS4 are given in Figure [9j 

Definition 5.9. System SS5 is SS4 plus the rule B. System DS5 is DS4 plus the propa- 
gation rules given in Figure [9l 

Note that as a consequence of symmetry, the forward-looking and the backward-looking 
modal operators (and their structural counterparts) collapse. Hence, the propagation of 
diamond-formulae becomes 'colour-blind', i.e., behaves exactly as ♦ in any context. This 
simplifies significantly the proof of admissibility of structural rules of SS5 in DS5, in 
particular, admissibility of B. 

Theorem 5.10. For every T, we have hsss F if and only i/l~DS5 F. 

Note that DS5 captures 5*5 = KT4B rather than 55 = KT45. It is also possible to 
formulate deep inference rules that correspond directly to axiom 5, but one would need 
a form of global propagation rule (see Section [6]). Again, as with DS4, the separation 
property also holds for DS5. Let DKS5 be the restriction of DS5 to the purely modal 
fragment. 

Theorem 5.11 (Separation). For every modal formula A, Kdkss A iff A is a theorem of 
S5. 



22 



R. GORE, L. POSTNIECE, AND A. TIU 



5.4. A deep inference system for an extension of Kt with the axiom of unique- 
ness. We now consider extending Kt with the axiom CD : ()^ OA. Its primitive form 
is ♦O^ A and its corresponding structural rule is 

r,A 
r,.{o{A}} ^- 

The propagation rules needed to absorb this structural rules are as follows: 

s[A«{r,o{AA}}] s[o{Ai,^},o{AA2}] ^ £[A«{r,°RA}}] ^ 

E[A.{r,o{A}}] ' S[o{Ai,^},o{A2}] ' S[.{r,o{AA}}] ' 

Definition 5.12. System SSU is SKt plus the rule U. System DKtU is DKt plus the 
propagation rules ui,U2 and ^3. 

Lemma 5.13. Every rule o/DKtU is derivable in SSU. 

Proof. Since all the rules of DKt are derivable in SKt, which is a subset of SSU, it is 
enough to show that the additional propagation rules ui,U2 and M3 are derivable in SSU. 
Figure [10] shows the derivations of ui (the left figure) and U2 (the right figure) . The rule U3 
can be derived similarly, i.e., using ui and appropriate applications of residuation. In the 
derivation of ui, we use implicitly Proposition 13 . 21 to display nested structures, and the fact 
that deep inference rules Oi and ^i, and the deep weakening rule are derivable in SKt. □ 

Theorem 5.14. For every T, we have Hssu T if and only i/l~DKtu T- 

Proof. Lemma 15.131 shows one direction; it remains to show the other, i.e., that every cut- 
free derivation of SSU can be transformed into a derivation in DKtU. As with the case 
with DS4 and DS5, we need to first prove admissibility of all structural rules. This can 
be done by straightforward induction on the height of derivations and case analyses on the 
last rules of the derivations. There are numerous tedious cases to consider, but none are 
difficult; we leave them as an exercise for the reader. □ 

By restricting to the purely modal fragment of DKtU, we get a sound and complete 
proof system for modal logic K + CD. Let DKU be the modal fragment of DKtU, i.e., 
DK plus the rule U2. 

Theorem 5.15 (Separation). For every modal formula A, Hdku A iff A is a theorem of 
the modal logic K + CD . 



6. Path axioms and global propagation rules 

We now consider extensions of Kt with a class of axioms which we call path axioms. As the 
name suggests, these axioms can be seen as describing paths in a tree of sequents along which 
formulae can propagate. We show that Kt extended with path axioms can be formulated 
in both the shallow calculus and the deep calculus. For the latter, the formulation of the 
propagation rules is derived naturally from the (transitive closure of) axioms. 

Before we proceed, it will be helpful to draw a distinction between a formula and a 
schematic formula. We have so far blurred this distinction when we discuss axioms (which 
are schematic formulae) and their instances. By a schematic formula, we mean syntactic 
expressions composed using logical connectives and meta variables. We shall denote meta 
variables with A, Y and Z. A formula scheme can be instantiated by substituting its meta 
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s[A'{r,oRA}}] ^ 

— lu = rf'.rv 

^,A.{r,o{A,A}} ^ s[o{Ai,A},o{AA2}] 

' , — — j— 1-- — rj 



IDA^ ^',^,^0^,-{r,o{A}} Ai,A*{^,o{AA2}} 

cni — ^ : — — r . -.1 ^1 



^,AA'{r,o{A}} Ai,A*{^,o{A2}} 

^,A'{r,o{A}} ^''^ ^,o{Ai,A},o{A2} 

s[A,.{r,o{A}}] '■^'''^ s[o{Ai,^},o{A2}] '■^''■^ 

(1) (2) 
Figure 10: Derivations of the rules ui and U2- 



variables with (concrete) formulae or other formulae schemes. By axioms, we usually mean 
schematic formulae whose (concrete) instances are admitted as theorems of the logic. In the 
following, we shall make explicit this distinction between formulae and schematic formulae. 
We shall also use the notation (?) (possibly with subscripts) to denote a diamond-operator 
of either color, and [?] to denote its de Morgan dual. 

Definition 6.1. A path axiom is a schematic formula for the form (?)^ • • • (?)„-Y (?)-^ 
where n > 0, and each of {(?), (?)]^, . . . , (?)„} is either a 0, or a ♦. 

The class of path axioms includes any instance of primitive Scott-Lemmon axiom 
P{h, i,j, k) where i + k = 1. By Lemma l5.2l these are equivalent to the following instances 
of Scott-Lemmon axioms: 

Hence, it subsumes most standard axioms such as reflexivity (OX — ?> X), transitivity 
(00^ OX), symmetry {X \JOX), and euclideanness (0^ ^ DO^)- 

To each path axiom, (?)i • • • {'^)n^ ~^ (?)-^) define a corresponding structural rule 
as shown below left, where * is the structural connective for [?] and each *j is the structural 
connective for [?]^. For example, the structural rule for the axiom O^O-^ OX is as given 
below right. 

r,*{A} r,o{A} 
r,*i{...*,{A}---} r,o{.{o{A}}} 

Given a set of axioms P, we denote with p(P) the set of structural rules corresponding to 
axioms in P. As with Scott-Lemmon axioms, axiomatic and structural extensions of SKt 
with path axioms are equivalent. The proof of the following proposition is similar to the 
proof of Proposition 15.41 

Proposition 6.2. For any set P of path axioms, the proof systems SKt AxP and SKtP 

are equivalent. 

As a corollary of Theorem 13.161 cut elimination holds for SKtP. 



Theorem 6.3. Cut elimination holds for SKtP, for any set P of path axioms. 
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6.1. Propagation rules for path axioms. A straightforward way to incorporate a path 
axiom, say, O^X — )■ 0^ in the deep inference system DKt is to simply use it as a rule, by 
replacing O^-'^ with O-'^ (reading the rule top down), i.e.. 



Despite its appealing simplicity, adding such a rule will destroy the subformula property, and 
as our main goal is to design proof-search friendly calculi, such an introduction rule must be 
ruled out. What we propose here is essentially the same, but instead of putting the formula 
in the premise, we consider all its possible interactions with the surrounding context 
(S[ ]) to decompose it to X. This would involve propagating X to different subcontexts 
in S[ ], depending on the axiom. The main challenge here is then to design a sound and 
complete set of propagation rules for the axiom. 

To understand the intuitive idea behind propagation rules for path axioms, it is helpful 
to view a nested sequent as a tree of traditional sequents. Following Kashima [17J, we define 
a mapping from sequents to trees as follows. A node is a multiset of formulae. A tree is a 
node with or more children, where each child is a tree, and each child is labelled as either 
a o-child, or a •-child. Given a sequent E = Q, o{ri}, • • • , o{r„}, •{Ai}, • • • , •{Am}, where 
is a multiset of formulae and n > and m > 0, the tree treeir.) represented by H is: 



In DKt, a 0- or a ♦-prefixed formula can navigate up and down a sequent tree, depending 
on where it is positioned in the tree. The rule Oi allows a formula 0^ to propagate its 
subformula A down the tree along an edge labelled by o, and O2 allows the same formula to 
propagate A up the tree along an edge labelled by •. Similarly, allows ^A to propagate 
A down an •-edge and ^2 allows it to propagate A up an o-edge. Graphically, one can 
represent these movements by assigning two kinds of diamond-labelled directed edges to 
each edge in a sequent tree, which encode the kinds of diamond-prefixed formulae that can 
propagate along the directed edges. The four movements mentioned previously can thus be 
represented as the dotted lines in the following graph: 



For example, the "diamond paths" from the node labelled by Ai to A2 characterise the 
diamond prefixes needed to propagate a formula from Ai to A2; they include formulae such 
as ♦♦vl (one goes up to the root and then down to A2), or ♦O^^^ (i-e., one does a "loop" 
from Ai to and back to Ai, before proceeding to A2), etc. 

In proof search, a path axiom such as O^O^ — ?• 0^ can be read as an instruction for 
propagating a formula 0^: replace 0^ with ()^()A and propagate along the diamond path 
O^O- Depending on where the formula 0^ is located in a sequent tree, there are several 
possible moves that correspond to the path Some of these are given in Figure [TTl 

In designing the propagation rules for a set of path axioms, in order to get completeness, 
one needs to take into account two things: arbitrary compositions of the axioms and their 
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Figure 11: Some propagation scenarios for axiom O^OA ()A. 



interactions with the rcsiduation axioms. An axiom such as ()^()X — > 0-^ not only specifies 
a set of possible propagations for 0^, but also specifies, via residuation, propagations for 
^A. It is easy in this case to show that ♦O^-^ is a consequence of that axiom. 

In the following, when (?) denotes an diamond operator (♦ or 0), {'^)~^ denotes its 
tense or modal counterpart. That is, if (?) = then (?)~ denotes ♦ and vice versa. 

Definition 6.4. Let F be the path axiom (?)-^ • • • (?)„-'^ — > (?) X. The inverted version of 
F, denoted by I{F), is the schematic formula (?)~^ • • • {7)1^ X {7)~^X. 

Obviously, we have /(/(F)) = F. A path axiom can be shown equivalent to its inverted 
version. 

Lemma 6.5. Let F be a path axiom. Then F is equivalent to I{F). 

Proof. Since /(/(F)) = F and /(F) itself is a path axiom, it is enough to show one direction, 
i.e., F implies /(F). We first note that the following are theorems of tense logic (they are, 
in fact, the axioms of residuation): 

X aix X uox. 

There are two cases to consider: 

. F = (?)i • • • {7)^X OX. Then /(F) = (?)-^ • • • (?)^^X ^ iX. By contrapositon, we 
have that F implies DX — >■ [?]i • • • By instantiating this axiom scheme with ♦X, 

we have D^X ^ [?]^ • • • [?]„4X Since X B^X, we also have X [?]^ • • • [?]„fX 
Note that since [?] ■ is the de Morgan dual of (?)j, its residual must be (?)j~^. Therefore, 
by residuation, we have 

• • • ^ ^x. 

• F = {7}-^ ■ ■ ■ (?)„X ^X. This is similar to the previous case, except that we compose 
with the axiom X ■O-'^^. □ 
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Definition 6.6. Let F and G be the following path axioms: 

F is said to be composable with G at position i if (?)^ = We denote by -F >* G the 

composition of F with G at i, i.e., the formula: 

We say that F is composable with G if F is composable with G at some position i. We 
denote with F > G the set of all compositions of F with G, i.e., 

F i> G = {F 0* G I F composable with G at i}. 

Notice that composition of axioms are basically just modus ponens, so the compositions 
of F and G are obviously logical consequences of F and G. 

Lemma 6.7. If F is composable with G at i, then F>^ G is a logical consequence of F and 
G. 

Definition 6.8. Let P be a set of path axioms. The completion o/P, written P*, is the 
smallest set of path axioms containing P and satisfying the following conditions: 

(1) It contains the identity axioms 0^ OX and ♦X — ?> ♦X. 

(2) It is closed under composition, i.e., if F, G G P* and F is composable with G, then 
F>G C P*. 

Alternatively, we can characterise P* via a monotone operator: 

C{S) = \J{F >G \ F,G e S and F is composable with G}. 

Now define an n-th iteration of C as follows: 

C^{S) = 

C"+i(5) = 5UC(C"(5)). 
Then it can be shown that (see [IJ) 

P* = J C"(P U {OX ^ OX, iX ^ iX}). 

n<uj 

That is, every element of the set P* can be obtained via a finite number of compositions 
using axioms in the set P U {O-'^ — > O-''^, ^X ♦X}. We shall use this fact in the proofs 
involving the completion of P. 

In the following, we lift the operator / to a set of axioms, i.e., /(P) = {I{F) \ F G P}. 

Lemma 6.9. Let P be a set of path axioms. If I(P) C P then for every F G P* we have 
I{F) G P*. 

Proof. By induction on the formation of the set P* and Definition 16.61 □ 
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To define the propagation rules, we need to define the notion of a path between two 
nodes in a tree. This is given in the following. 

Definition 6.10. Let F be a nested sequent, and let N be the set of nodes of tree(T). The 
propagation graph PG(T) for F is a directed graph such that the set of nodes of PG{T) is 
N, its edges are labelled with ♦ or and are defined as follows: 

• For each node n & N, and each o-child ni of n, there is exactly one edge (n,ni) labelled 
with 0, and exactly one edge (ni,n) labelled with 

• For each node n £ N, and each "-child ni of n, there is exactly one edge (n,ni) labelled 
with and exactly one edge (ni,n) labelled with {>. 

A labelled path (or simply, a path) in a propagation graph is defined as usual, i.e., as a 
sequence of nodes and diamonds, separated by semicolons, 

ni; (?)i;n2; (7)2; • • • ;nk-i; {^)k^i]nk 

such that each (nj,nj+i) is a (?) --labelled edge in PG(F). We use vr to range over paths in 
a propagation graph. If vr is a path then (vr) denotes the sequence of labels (i.e., ♦ or 0) 
that occur along that path. 

We are now ready to define the set of propagation rules for a set of axioms. But first 
we introduce a notational convention for writing contexts. Note that since a context is 
just a structure with a hole [] in place of a formula, it also has a tree representation. In a 
single- hole context, the hole [] occupies a unique node in the tree. We shall write when 
we want to be explicit about the particular node i where the hole is located. This notation 
extends to multiple-hole contexts, e.g., denotes a two-hole context where the first 

hole is located at node i and the second at node j in tree(S[][]). 

Definition 6.11. Let P be a set of path axioms. The set of propagation rules for P, written 
Prop(P), consists of rules of the form: 

if there is a path vr from i to j in PG{T) such that {tt)X {1)X G (P U /(P))*. 

We denote with SKtP the structural extension of SKt with P and DKtP the extension 
of DKt with propagation rules Prop{P). 

Notice that by definition, the rule Oi, 02, ♦! and ^2 are just instances of propagation 
rules, i.e., they are propagation rules for the identity axiom 0^ — > ()X and — > ^X. So 
in the following proofs, we do not explicitly do case analyses on instances of these rules, as 
they are subsumed by the more general cases involving the propagation rules. 

Lemma 6.12. For any set of path axioms P and any structure F, i/l~DKtP L then hsKtP L. 

Proof. Since SKt is a subset of SKtP, derivations of DKt rules in SKtP are done as in 
Theorem 14. 6[ It remains to show derivations of the propagation rules. It is enough to show 
that each instance of each axiom in (P U I(P))* is derivable in SKtP. This in effect would 
allow us to derive the following rule (via cut and Proposition 13. 2p : 
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for each axiom ■ ■ ■ ~^ C^) ^> which would then allow us to mimick the propagation 

rule for that axiom. The derivation of the axioms of (P U /(P))* follows straightforwardly 
from Lemma 16.51 Lemma 16.71 Definition 16.81 and Lemma 16.91 □ 

Lemma 6.13. The rules dw, dgc, rp and rf are height-preserving admissible in DKtP, for 
any set of path axioms P. 

Proof. As height-preserving admissibility of these rules have been proved for DKt, the new 
cases are those that interact with the propagation rules in Prop(P). That is, we need to 
prove these for the cases where the derivation of the premise of the rules, say H, ends with 
a propagation rule: 

Hi 

Since the propagation rule only requires the existence of a path between node i and j, it is 
sufficent to show that a path still exists between those nodes in the modified structure. This 
is trivial for weakening. For the residuation rule rp (the case with rf is similar), suppose 
that n is a derivation of the premise of rp, i.e., 

s[(?)^M% = r,.{A} 

for some T and A. We need to show that there exists a derivation U' of o{r}, A. It is 
enough to show that the propagation graph of o{r}, A is identical to the propagation graph 
of r, '{A}; hence any path that exists in the latter also exists in the former, and therefore 
any propagation that applies to the latter also applies to the former. The fact that the 
propagation graphs of both structures coincide can be easily seen in the graphs in the 
upper row in Figure [IS the only change caused by residuation is confined to the root of 
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the sequent tree, so one needs only to check that the nodes affected by these changes are 
still connected with the same labelled edges. 

To prove admissibility of dgc, as with the case of DKt, we need to prove admissibility 
of formula contraction dfc and the medial rules mf and mp, as in Lemma |4.4[ 

Admissibility of dfc can be proved by a simple induction on the height of derivation. 
We show here a proof of admissibility of mf; admissibility of mp can be proved similarly. 
So suppose l-DKtP n : S[o{Ai}, o{A2}]. We need to show that there exists H' such that 
l~DKtP n' : S[o{Ai, A2}] and |n'| = |n|. The proof in this case is similar to the proof of 
the admissibility of residuation: one shows that the modified structure still preserves the 
existence of a path between two nodes where propagation happens. Since the differences 
between tree(o{Ai}, o{A2}) and iree(o{Ai, A2}) are confined to the top three nodes in 
the trees (see the graphs in the lower row of Figure [T2]) , we need only to show that labelled 
edges between the top three nodes in the propagation graph for o{Ai}, o{A2} are preserved 
in their corresponding nodes in the propagation graph for o{Ai, A2}. This is shown in the 
graphs in the lower row in Figure [T2l □ 

Lemma 6.14. Let F be a set of path axioms. Every structural rule in p(P) is admissible 
in DKtP. 

Proof. Let • • • (^)k^ (?)^ be an axiom in P and let p be its corresponding structural 
rule: 

r,*i{---*fc{A}---} ^ 

Let n be a DKtP-derivation of r,*{A}. We show by induction on the height of H that 
there exists a DKtP-derivation li' of r,*i{- • • -k^. {A} • • • }. Let ni denote the root node 
of the tree iree(r,*{A}) and let 722 denote its child that is the root of its subtree A. So 
graphically, the nested sequent r,*{A} can be represented schematically as the tree on the 
left in Figure [T3l The tree for r,*i{- • • {A} • • • } replaces the node n2 in iree(r,*{A}) 
with k new nodes. As k could be 0, node ni and node n2 could possibly be identified in 
the conclusion of the rule p. The only interesting cases are when H ends with a propagation 
rule that propagates a (?)^ formula across node ni to 112 or the reverse. So suppose p 
propagates a formula along the following path: 

7ri;ni; (?);n2;7r2. 

This means that (7ri)(?)(7r2)X {1)X is a member of (PUl(P))*. Since the set (PU/(P))* 
is closed under axiom composition, we also have that {tti){'^)i ' ' ' (^■)ki'^'i)'^ ~^ C^)^- The 
latter implies that the following 

7ri;ni; (?)^; • • • ; (?)fc;n2;vr2 

is a path in the propagation graph of F, • • {A} ■ ■ ■ }i so the propagation of {1)A that 
applies to F,*{A} can also be applied to F,*i{- • • -k^ {A} " " " }• The other case where the 
propagation passes from n2 to ni can be proved symmetrically, since the set (P U /(P))* is 
closed under residuation. This is represented graphically in Figure [T3l □ 

Theorem 6.15. For any set of path axioms P and any nested sequent T, hsKtP T if and 
only if l-DKtP r. 



Proof. This follows from Lemma 16.121 Lemma 16.131 and Lemma 16.141 



□ 
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Figure 13: Preservation of propagation paths in structural rules for path axioms. 

As with all the other extensions of DKt so far, the separation property also holds for 
DKtP. Let DKP denote the purely modal fragment of DKtP. Below we denote with K+P 
the modal logic K extended with the axioms P. 

Theorem 6.16 (Separation). For any set of path axioms P and any modal formula A, 
l~DKP A if and only A is a theorem of K + P. 

6.2. Computing the applicability of propagation rules. Since the propagation rules 
of DKtP allow propagation of a formula to a node at an arbitrary distance from the original 
node, depending on the set of axioms adopted, applications of these rules are not simple 
pattern matching like the local propagation rules we encountered in Section [5l A major 
obstacle in proof search for DKtP is to decide, given a nested sequent S[(?)^]j[0]j, where 
i and j denote two nodes in the tree of the sequent, whether the subformula A of the 
occurrence of at node i can be propagated to node j. There are two main problems in 
checking whether a propagation rule is applicable: 

• there can be infinitely many paths between i and j, and 

• there can be infinitely many combinations of axioms of P (and its inverted versions). 

In this section we show that the decision problem of whether a propagation rule is applicable 
to a nested sequent is decidable. The main idea here is to view path axioms as representing 
a context-free grammar, and the propagation graph of a nested sequent as a finite state 
automaton. The problem of checking whether a propagation rule is applicable to two nodes 
of a nested sequent is then reduced to checking whether the intersection of a context-free 
grammar and a regular language is non-empty, which is known to be decidable 

Let F and P be two non-terminals (denoting 'future' and 'past' respectively) in a 
context-free grammar. Define a function C assigning diamond operators to either F oi P 
as follows: 

C«» = F C(f) = P 
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Each path axiom • • • {'^)n-^ ~^ (^■)n+i-^ defines a production rule as follows: 

C((?)„^.i)-C((?)i)...C((?)J. 

If ^ is a path axiom, we write G{A) to denote its associated production rule defined as 
above. For example, the axiom ()^()X ()X defines the production rule F FPF. 

We recall that a context-free grammar is defined by a tuple (A^, T, Pr, S) of a set of 
non-terminal symbols iV, a set of terminal symbol T, a set of production rules Pr, and a 
start symbol S & N. We shall write F -»* s to denote a derivation of the sequence s of 
symbols from the symbol F. 

Definition 6.17. Let P be a finite set of path axioms. Define two context-free grammars 
generated from P as follows: 

(1) Let Lo(P) be the grammar ({F,P},{(),^},Pr,F) where Pr is the smallest set of 
production rules such that: 

(a) F ^ and P ^ ♦ are in Pr. 

(b) For each axiom in yl G P U /(P), G{A) G Pr. 

(2) Let L^(P) be the same grammar as Lo(P) except that the start symbol is P instead 
of P. 

The following lemma follows immediately from Definition 16.171 

Lemma 6.18. LetP be a finite set of path axioms. Then (?)^ • • • ^ OX e (PU/(P))* 

if and only if (?)^ • • • (?)„ G L^(P). Similarly, {1)^ ■ ■ ■ {?)^X ^ ♦X G (P U /(P))* if and 
on^2/^/(?),■■■(?)„GL♦(P). 

Note that the propagation graph of a nested sequent can be seen as essentially a finite 
state automaton, minus the initial and final states. 

Definition 6.19. Let F be a nested sequent, and let ni and n2 be two nodes in tree(F). 
The {ni,n2)-path automaton of F, written Path{T,ni,n2), is the directed graph PG(F) 
with starting state ni and final state n2. 

Lemma 6.20. Let T be a nested sequent and let ni and n2 be two nodes in tree{T). Then 
for every tt, ir is a path from ui to n2 if and only if (vr) G Path{T,ni,n2)- 

Theorem 6.21. Let F be a finite set of path axioms and let F be S[(?)j4]j[0]j. Then a 
formula occurrence ()A at node i can be propagated to node j in the proof system DKtP if 
and only z/Lo(P) n Path(T,i,j) ^ 0. Similarly, a formula occurrence at node i can be 
propagated to node j in the proof system DKtP if and only if L^(P) n Path{T,i,j) ^ 0. 

Proof. Straightforward from Lemma l6 . 1 8 1 and Lemma 16.201 □ 

Theorem 6.22. Let P be a finite set of path axioms. Let T be a nested sequent. The problem 
of checking whether there is a propagation rule in DKtP that is (bottom-up) applicable to 
F is decidable. Moreover, assuming P is fixed, the complexity of the decision problem is 
PTIME in the size ofT. 

Proof. By Theorem l6.21l this decision problem reduces to the problem of checking emptiness 
of the intersection of a regular language and a context-free language, which is itself a context- 
free language (see [Hi, Chapter 3). Let A be the finite state automaton encoding paths 
in F and let n be its size. Let G be the context free grammar generated from the axiom 
P (i.e., it is either -Lo(P) or ^^(P)). In [11], the intersection of A and G is done by 
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constructing another context-free grammar Q' . More specifically, for each production rule 
of Q, say y — » 0102 ■ ■ ■ ctm, where y is a non-terminal of G and Oi is either a terminal or 
a non-terminal of Q, one constructs n™^^ production rules of the same length for Q' . So 
the size of Q' is bounded by 0(/ x A; x n'^"'"^) where I is the number of production rules 
in Q and k is the maximum length of the production rules of G- Since the construction of 
each production rule of G' from a production rule of G length m takes 0(m)-time, the time 
complexity of the construction of G' is also bounded by 0(/ x fc x n'^"'"^). See [11] for the 
details of the construction of G' ■ If we assume that P is fixed, then obviously I and k are 
constants, the grammar G' is computable in PTIME in the size of T, and its size is also 
polynomial in the size of T. Since emptiness checking of a context-free language is decidable 
in PTIME (see e.g., [22j), it follows that the problem of checking the applicability of the 
propagation rules is also decidable in PTIME. □ 

In some cases, the propagation rules for a given set of axioms can be characterised by 
simple regular expressions. We give some examples below. In the following, we shall use the 
symbols -|- and * to denote the union operation and the Kleene-star operations on regular 
languages. We shall be concerned only with regular languages generated by the alphabets 
{<>,♦}. 

Example 6.23. Transitivity. Consider the case where P = {OOX — )• OX}. It is easy to 
see that in this case, we have Lo(P) = 00* and L^(P) = If one adds the axiom 

of reflexivity, then we get the logic KtSA and the propagation paths are characterised 
by L(){Y') = 0* and -L^(P) = In other words, the propagation rules for KtSA are 
characterised by movements along paths of diamonds of arbitrary length and of the same 
color. 

Example 6.24. Euclideanness. Consider the case of where P = {♦O^ —> 0^}- Note that 
the inverted version of the (primitive form) of the axiom 5 is 40^ ^X. We claim that 
the paths allowed by P can be characterised as follows: 

Lo(P) = + (♦(♦ + 0)*0) L^{P) = ♦ + (♦(♦ + 0)*0). 

We prove this claim for the characterisation of Lo, the other case is similar. First, we show 
that L0(P) C + (♦(♦ + 0)*0)- By definition, the production rules of L(^(P) are 

F ^ PF, P ^ PF, F ^ 0, and P ^ ♦. 

It is clear that members of Lo(P) are either of the form or ♦sO, for some sequence of 
diamonds s. But obviously, s G (♦ -1- 0)*, so we indeed have L()(P) C + (♦(♦ + 0)*0)- 
For the other direction, suppose that s G + (♦(♦ + 0)*0)- We show by induction on the 
length of s that s G Lo(P). The case where s = is trivial. So suppose s = ♦s'O for some 
s' G (♦ -|- 0)*- The case where s' is the empty string is trivial; there remain two cases to 
consider: 

• s' = ()t for some t. By the induction hypothesis, we have that 4*0 G L<)(P). Note that 
the first ♦ in this sequence can only be a result of the production rule P ^ ♦, so we have 
that F — »* Pt() ♦tO- Now, the sequence s is then generated as follows: 

F ^* PtO PFt() POtO iOiO = s. 

• s' = ♦t for some t. By the induction hypothesis, we have ♦tO G Lo(P), that is, we have 
F ♦tO- The sequence s is then derived as follows: 

F ^ PF ^* P^tO ^ ♦♦to = s. 
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Function Prove (Sequent H) : Bool 

(1) Let T = tree{E) 

(2) If the id rule is applicable to any node in T, return True 

(3) Else if there is some node B € T that is not saturated 

(a) If A V S G and A ^ Q or B ^ @ then let Hi be the premise of the V rule 
applied to Ay B & Q. Return Prove{Ei). 

(b) If yl A G Q and A ^ Q and B ^ Q then let Si and H2 be the premises of 
the A rule applied to A A B G G. Return True iff Proue(Hi) = True and 
Prove(r.2) = True. 

(4) Else if there is some node G T that is not realised, i.e. some B = DA {B = MA) 
is not realised 

(a) Let Si be the premise of the □ (■) rule applied to i? G 0. Return Prowe(Si). 

(5) Else if there is some node G that is not propagated 

(a) Let p be the rule corresponding to the requirement of Definition 17.31 that is not 
met, and let Si be the premise of p. Return Proveir^i). 

(6) Else return False 



Figure 14: Proof search strategy for DKt 



The above characterisation of the propagation rules for axiom 5 basically says that a 
formula such as ()A can be propagated along paths of the following form: it is either 0, or 
it must start with followed by any path of arbitrary length, and end with 0- Using this 
characterisation, one can replace the generic propagation rule for 0-formulae in Prop{P) 
(see Definition 16. lip , with more specific rules in the following (in addition to the rules Oi 
and O2 in Figure [7]): 

s[o{OAA}][o{r,A}] s[o{OA,A}][.{r},^] 
E[o{o^,A}][o{r}] s[o{OAA}][.{r}] ' 

£[OA'{A}][o{r,A}] s[OA'{A}][*{r},A] 

s[OA«{A}][o{r}] ^ s[o^,.{A}][.{r}] ^ ' 

In the purely modal setting, the propagation rule p5„ in Example 16.241 above is similar 
to that considered by Briinnler [7] 3 

s[o{r}][0^] o 
s[o{r,OA}][0] 5 

But notice that, unlike our propagation rules, Briinnler's rule allows propagation of 0^ 
without introducing the connective 0- 

Example 6.25. S5. If one adds the axiom of reflexivity X — ?> 0^ to the set P in the 
previous example, one gets the logic 5*5. In this case, the propagation rules admit a very 
simple characterisation: the formula 0^ (likewise, ^A) in a node u in a tree of sequents 
can be propagated to any node in the the tree, i.e., we have io(P) = -^^♦(P) = (0 + ♦)*• 
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7. Proof search in DKt 

We now present a preliminary result in proof search for DKt. This section is meant to serve 
as a preview of our planned future work in designing more general proof search strategies 
for a wide range of deep inference calculi discussed in the previous section. 

We shall be working with the tree representation of nested sequents as discussed in 
the previous section. However, since contraction is admissible in DKt and its extensions 
discussed so far, we shall consider a node as a set rather than a multiset. While traditional 
tableaux methods operate on a single node at a time, our proof search strategies will consider 
the whole tree. Our proof search strategy is based on a saturation procedure familiar from 
the tableaux setting. In the following, given a tree T of sequents and a node u in T, we 
denote with S{u) the set of formulae at node u. 

Definition 7.1. A set of formulae Q is saturated iff it satisfies: 

(1) UAvBee then A G 6 and S G G. 

(2) UAAB^e then AgQ or B GO. 

(3) For every propositional variable p, p G implies -ip Q, and G Q implies p ^ Q. 
A node -u in a tree T is saturated iff S{u) is saturated. 

Definition 7.2. Given a tree T and a node u in T, a formula OA G S{u) (MA G S{u)) is 

realised iff there exists a o-child (•-child) w of u in T with A G S{u). 

Definition 7.3. Given a tree T and a node u in T, we say u is propagated iff: 
Oi" for every 0^ £ 'S{u) and for every o-child v of u, we have A € S{v); 
♦ i:: for every ^A G S{u) and for every "-child v of u, we have A G S{v); 
O2" for every "-child v of u and for every <>^ G S{v), we have A G S{u); 
♦2" for every o-child v oi u and for every ^A G S{v), we have ^ G 5(u). 

Figure [m gives a proof search strategy for DKt. The application of a rule deep inside 
a sequent can be viewed as focusing on a particular node of the tree. The rules of DKt 
can then be viewed as operations on the tree encoded in the sequent. In particular. Step [3] 
saturates a node locally, Step H] appends new nodes to the tree, and Step [5] moves (♦) 
prefixed formulae between neighbouring nodes. 

The degree of a formula is the maximum number of nested modalities: 

deg{p) = 
deg{A#B) = max{deg{A),deg{B)) fov £ {A,V} 
deg{#A) = 1 + deg{A) for # G {□, 0, ■, ♦}• 

The degree of a set of formulae is the maximum degree over all its members. We write 
sf{A) for the subformulae of A, and define the set of subformulae of a set as s/(0) = 
Uyige ■^/(^)- ^ sequent H we define s/(H) as below: 

E =0, o{ri}, • • • , o{r„}, .{Ai}, • • • , .{A„} 

sf{E) = s/(0)Us/(ri)U---Us/(r„)Us/(Ai)U---Us/(A„). 
Theorem 7.4. Function Prove terminates for any input sequent E. 

Proof. Let m = \sf{E)\, d = deg{sf{E)) < m and T = tree{E). The saturation process for 
each node in T is bounded by m. Therefore after at most m moves at each node. Step [3] is 



'This is not the exact form of the rule given in 7 , but it describes the same rule. 
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no longer applicable to this node. T is finitely branching, since new nodes are only created 
for unrealised box formulae. Therefore after at most m moves at each node, Step H] is no 
longer applicable to this node. The depth of T is bounded by d, since each node u in T at 
distance k from the root of T has degree{S{u)) < d — k. Since 0- and ♦-prefixed formulae 
are only propagated to nodes that do not already contain these formulae, after at most m 
propagation moves into each node. Step [5] is no longer applicable to this node. □ 

We now show that the procedure Prove is sound and complete with respect to DKt. 
A typical semantic completeness proof would construct a countermodel from a failed proof 
search. In the following proofs, however, we shall use purely proof theoretic arguments 
without reference to semantics, unlike, say, completeness proof for a similar procedure for 
modal logics in [4J. 

Lemma 7.5. Let 3 be a sequent such that each node in tree(H) is saturated, realised, and 
propagated. Then H is not derivable in DKt. 

Proof. We prove this by contradiction: Assume that H has a derivation, therefore it also has 
a shortest derivation, say 11. We show that one can construct an even shorter derivation, 
hence contradicting the assumption. This is done by exploiting the fact that tree{E) is satu- 
rated, realised and propagated, and Lemma SH] (essentially, height-preserving admissibility 
of contraction) . We show that every attempt to apply a rule to E will lead to a duplication 
of formulae or create unnecessary structures (in the sense of the medial rules). We show 
here one case involving the rule □; the others are similar. 

Suppose n ends with the rule □. In this case we have H = S[n^, o{^. A}], for some 
context S[ ] and some sequent A, such that the rule □ is applied to OA in the context S[ ]. 
Note that o{A, A} must also be in the same context since every node of iree(H) is realised, 
n in this case takes the form: 

n' 

naA,o{A},o{A,A}] 
S[n^,o{A,A}] 

Applying Lemma 14.41 to 11', we get a derivation Hi of S[nyl, o{^, ^, A}] such that |ni| = 
|n'|, and applying the same lemma to Hi, we get another derivation 112 of S[n^, o{A, A}] 

with |n2| = |ni| = |n'| < |n|. 

Since 11 cannot end with any of the rules of DKt, this obviously contradicts the as- 
sumption that it is a derivation in DKt. It then follows that H is not derivable in DKt.n 

Theorem 7.6. Let 3 be a sequent. Then hoKt ^ if and only if ProvefB) returns True. 

Proof. Soundness of the Prove procedure is obvious since each of Step 1 - Step 5 are just 
applications of DKt-rules. By Therem 17.41 Prove(H) always terminates and returns either 
True or False. To show completeness, we show that if Prove(H) returns False then H is not 
derivable in DKt. Note that each rule of DKt is invertible, hence Step 1 - Step 5 in Prove 
preserves provability of the original sequent. If Prove(H) returns false, this can only be the 
case if Step 6 is reached, i.e., the systematic bottom-up applications of the rules of DKt 
produce a sequent such that every node in the tree of the sequent is saturated, realised, 
and propagated. By Lemma [73} such a sequent would not be derivable, and since all other 
steps of Prove preserves derivability, it follows that H is not derivable either in DKt. □ 
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8. Conclusion and related work 

This work started out as an attempt to manage proof search in display calcuH, in particular, 
display calculi for tense logics by Kracht |18) . Due to the high-degree of non-determinism 
in display calculi, our approach was to first consider a restricted form of display calculi 
with good properties, in particular, it should allow one to prove cut elimination in a uni- 
form manner as in display calculi, but also close enough to traditional sequent calculi, so 
that traditional proof search methods, e.g., those based on saturation of sequents, can be 
applied. We have turned to nested sequent calculi for tense logics, as originally studied by 
Kashima [T7], as a compromise; nested sequents are more restricted than display sequents, 
but they still allow an important property, i.e., the display property, to be proved. The 
display property is essentially what makes it possible to prove cut elimination uniformly. 
More interestingly, our re-formulation of tense logics in nested sequent calculi allows us to 
observe an important connection between display postulates and structural rules (in the 
shallow calculi) and deep inference and propagation rules (in the deep inference calculi). 
We exploit this connection to get rid of all structural rules, which are the main obstacle to 
proof search, in the deep inference calculi. We have shown a preliminary result in structur- 
ing proof search for DKt. In the future, we hope to extend this to other extensions of DKt. 
We need to emphasize that our work is first and foremost a proof theoretic investigation 
of a proof search framework. Whether or not an efficient decision procedure can be built 
on top of our framework is an important question, but one which is out of the scope of the 
present paper. 

Related work. Areces and Bernardi ^ appear to be the first to have noticed the connection 
between deep inference and residuation in display logic in the context of categorial grammar, 
although they do not give an explicit proof of this correspondence. Lamarche [T9] proposes 
an approach to eliminating display postulates by moving to a more general theory of con- 
texts in which reversible structural rules like display postulates are treated as part of the 
algebraic definition of contexts, and gives a cut elimination procedure for substructural log- 
ics defined using this more general notion of contexts. Briinnler f^, T] and Poggiolesi [23] 
have given deep inference calculi for the modal logic K and some extensions. Sadrzadeh 
and Dyckhoff [25] have given a syntactic cut elimination procedure for some extensions of 
positive tense logic, i.e., tense logic without negation or implication. Briinnler has recently 
shown that the deep-inference-based cut elimination technique for K |4j can be extended 
to prove cut elimination for Kashima's S2KtH In his proof, a crucial step is a proof of the 
admissibility of a "deep" version of residuation: 

s[»{°{A},r}] £[o{.{A},r}] 
s[A,.{r}] s[A,o{r}] 

More recently, Briinnler and Strafiburger [7J have shown how one can extend, modular ly, 
their deep inference calculus for modal logic K with several standard axioms of normal 
modal logics. It is worth noting that their formulation of these extensions allow for structural 
rules to be present in the deep inference systems, contrary to our approach. In our setting, 
modular extensions of tense logic are easily achieved in the shallow setting. There is, 
however, a catch: our modularity result does not imply modularity in the modal fragments. 



'K. Briinnler. Personal communication. 
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This is because our modularity result relies on the display property, which in turn relies on 
the presence of both modal and tense structural connectives. 

Indrzejczak [16j and Trzesicki |27j have given cut-free sequent-like calculi for tense logic. 
In each such calculus there is a rule (or rules) which allow us to "return" to previously 
seen worlds when the rules are viewed from the perspective of counter-model construction. 
However, Trzesicki's calculus has a large degree of non-determinism and is therefore not 
suitable for proof search. In contrast, our system DKt admits a simple proof search strategy 
and termination argument. Indrzejczak's calculus is suitable for proof search but lacks a 
natural notion of a cut rule and cut elimination. It is also possible to give proof calculi 
for many modal and tense logics using semantic methods such as labelled deduction |21j 
and graph calculi but we prefer purely syntactic methods since they can potentially be 
applied to logics with more complicated semantics such as substructural logics. 

Future work. The immediate future work is to devise a terminating proof strategy for each 
extension of DKt with path axioms. For extensions that include transitivity, e.g., KtSi, 
one would need to perform loop checking as in Heuerding's proof calculus for S4 [15] to 
ensure termination. Although we have shown that one can compile any set of path axioms 
into a complete set of propagation rules, it will be more desirable if one can do it using 
only local propagation rules. Another interesting avenue for future work is to investigate 
compositions of path axioms with other axioms. For instance, a composition of path axioms 
with the seriality axiom (OA ()A) will allow us to capture all fifteen basic modal logics. 
Another problem is to find a complete set of propagation rules for the confiuence axiom 
(On^ 0()A). It is also interesting to see whether the connection between deep inference 
and display postulates can be extended to calculi with more complex binary residuation 
principles like those in substructural logics |2j . Another interesting direction is the addition 
of (first-order) quantifiers. An approach to this would be to consider quantifiers as modal 
operators, with appropriate display postulates, such as the ones developed in [28] . 
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